Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/901eb55c-e24b-4030-b7b8-fa4b8e3a6a30/f2c757fb39ea421ad15ddc04739c8758f2d5b009.roa
File:                     f2c757fb39ea421ad15ddc04739c8758f2d5b009.roa (raw, json)
Hash identifier:          pmMIlArGtXIuPnkb60hnzKvnfXdZtKq59W5D7DNHosU=
Subject key identifier:   A2:69:C0:B7:09:8B:08:0D:04:DD:E4:39:03:BE:7D:BA:FF:BD:0A:71
Certificate issuer:       /CN=0ce734ab5bcb4d2ab5fe5de4290e5746296d58b7
Certificate serial:       1EFDD3
Authority key identifier: 0D:FB:6E:FB:13:28:1B:AA:C1:19:FD:C7:C9:50:91:48:87:0C:02:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0ce734ab5bcb4d2ab5fe5de4290e5746296d58b7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/901eb55c-e24b-4030-b7b8-fa4b8e3a6a30/f2c757fb39ea421ad15ddc04739c8758f2d5b009.roa
Signing time:             Mon 08 May 2023 21:58:56 +0000
ROA not before:           Sun 07 May 2023 21:58:56 +0000
ROA not after:            Thu 08 May 2025 21:58:56 +0000
asID:                     269749
IP address blocks:        45.182.140.0/23 maxlen: 24
                          2803:f960::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2031059 (0x1efdd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce734ab5bcb4d2ab5fe5de4290e5746296d58b7
        Validity
            Not Before: May  7 21:58:56 2023 GMT
            Not After : May  8 21:58:56 2025 GMT
        Subject: CN=f2c757fb39ea421ad15ddc04739c8758f2d5b009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ab:c2:b5:c5:bd:a0:55:74:c1:1f:cf:f4:6e:
                    17:cc:23:8b:fd:3d:62:6e:69:dd:df:3e:23:31:85:
                    f0:68:f3:4f:b3:a1:67:a3:5b:f6:7c:19:87:18:f0:
                    18:30:c0:ab:31:21:f4:99:de:2f:d5:23:dd:ea:e6:
                    83:a3:4c:00:66:c4:f3:b0:9c:28:17:86:d7:93:3f:
                    5c:55:f2:b5:f0:90:b2:5f:b3:4d:06:0b:47:c5:8a:
                    94:6b:1f:5b:61:ac:e9:fe:9d:5a:ad:1e:ac:b9:23:
                    96:34:7b:ad:cb:10:3a:7d:1f:b2:a6:49:0c:1b:ff:
                    a9:0a:9b:0e:ad:c0:d0:21:d6:d1:2a:99:b9:c9:5a:
                    d8:31:b6:1b:3d:1d:07:52:d1:86:f7:c9:db:84:f1:
                    c1:61:84:1b:31:51:a1:db:6c:46:58:d6:73:56:7c:
                    ba:14:44:02:5f:dd:f5:07:c2:82:b5:a2:93:e2:2f:
                    f4:ad:bc:8c:74:d6:5f:7f:b9:c7:5e:27:bb:6d:a3:
                    90:4a:00:19:0e:32:2b:71:2a:8f:db:e3:63:58:13:
                    f3:39:f8:01:91:a3:35:1b:06:ad:52:88:cb:e8:c4:
                    79:85:04:f8:a7:79:4f:60:e2:ad:c6:a6:5d:46:03:
                    88:b5:d8:8b:62:7f:ad:05:2f:68:e8:4a:41:77:1e:
                    ab:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:69:C0:B7:09:8B:08:0D:04:DD:E4:39:03:BE:7D:BA:FF:BD:0A:71
            X509v3 Authority Key Identifier:
                keyid:0D:FB:6E:FB:13:28:1B:AA:C1:19:FD:C7:C9:50:91:48:87:0C:02:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0ce734ab5bcb4d2ab5fe5de4290e5746296d58b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/901eb55c-e24b-4030-b7b8-fa4b8e3a6a30/f2c757fb39ea421ad15ddc04739c8758f2d5b009.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/901eb55c-e24b-4030-b7b8-fa4b8e3a6a30/0ce734ab5bcb4d2ab5fe5de4290e5746296d58b7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.140.0/23
                IPv6:
                  2803:f960::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:94:3c:28:75:94:df:d6:d7:52:80:42:25:b2:b8:bc:0c:1a:
         41:d2:cb:f4:cd:b4:bd:dd:b5:c1:68:17:e2:4e:02:63:80:7c:
         e0:24:a1:64:c2:e1:af:02:9b:b1:79:eb:65:44:02:a6:7b:74:
         e8:8e:02:0f:d4:71:68:0f:46:94:d3:70:4a:04:aa:29:4d:b4:
         6b:38:ca:dd:74:31:f5:9e:65:37:5f:f7:cf:c2:97:30:ef:da:
         c9:77:21:4d:f1:2a:69:dc:7d:c5:19:7b:f1:d0:fb:c7:ed:ad:
         cd:58:96:84:63:cc:99:54:af:6c:47:94:3e:c6:86:bd:19:79:
         3e:11:4d:50:0f:89:93:cd:74:35:e2:32:71:e4:9c:39:ad:30:
         b4:56:5d:9d:1a:45:c1:2d:1f:aa:38:9a:e8:39:c2:15:04:91:
         5a:08:7f:6d:fb:17:e0:16:33:56:85:e4:99:fe:9f:8b:e5:a3:
         21:c9:be:ae:bf:34:2d:cd:8a:63:63:09:3b:08:f8:1a:37:04:
         e8:57:fe:d8:26:5d:e5:07:7c:8f:85:2e:97:7f:4d:4f:90:f8:
         9b:6f:60:14:6c:a9:a4:8a:c6:d5:16:8d:6e:8d:4b:02:c5:30:
         7e:a6:a1:2c:38:b7:4e:f6:91:ea:b6:1a:be:49:92:86:d6:77:
         66:8e:14:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----